Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-50096 | 6.1 (v3.1) | BUG-000187164 - ArcGIS Server has a security vulnerability. |
Esri |
ArcGIS Server |
2026-10-26T18:08:38.927Z | 2026-10-26T19:38:28.569Z |
| cve-2026-115804 | 6.4 (v3.1) | Consul vulnerable to an authorization bypass in health… |
HashiCorp |
Consul |
2026-10-26T18:09:52.286Z | 2026-10-26T19:38:28.416Z |
| cve-2026-110720 | 9.9 (v3.1) | Consul-k8s vulnerable to a cross-namespace authorizati… |
HashiCorp |
Tooling |
2026-10-26T18:38:14.209Z | 2026-10-26T19:38:28.240Z |
| cve-2026-110105 | 6.9 (v4.0) 5.3 (v3.1) | B3log Symphony through 3.6.4 Missing Authorization in … |
b3log |
Symphony |
2026-10-13T16:53:07.878Z | 2026-10-26T19:38:00.743Z |
| cve-2026-115908 | zip: Arbitrary file write outside the extraction direc… |
zip-rs |
zip2 |
2026-10-26T16:34:29.328Z | 2026-10-26T19:36:11.803Z | |
| cve-2026-115912 | vLLM: Public multimodal SHM handle forgery reaches wor… |
vllm-project |
vllm |
2026-10-26T16:54:00.643Z | 2026-10-26T19:35:42.879Z | |
| cve-2026-116385 | Bdtask Garage 24 Garage Management Software Profile ed… |
Bdtask |
Garage 24 Garage Management Software |
2026-10-26T17:15:19.523Z | 2026-10-26T19:35:21.597Z | |
| cve-2026-115915 | vLLM: Untrusted EPS inputs can trigger denial of servi… |
vllm-project |
vllm |
2026-10-26T17:16:06.387Z | 2026-10-26T19:35:10.423Z | |
| cve-2026-81509 | nforwardauth: Unvalidated r parameter allows post-auth… |
nosduco |
nforwardauth |
2026-10-26T17:19:15.467Z | 2026-10-26T19:34:58.155Z | |
| cve-2026-115919 | ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inferen… |
onnx |
onnx |
2026-10-26T17:24:40.346Z | 2026-10-26T19:34:47.244Z | |
| cve-2026-116634 | 8.2 (v4.0) 5.9 (v3.1) | OmniRoute 3.8.50 before 3.8.52 Missing Authentication … |
cheaper-inference |
OmniRoute |
2026-10-26T18:09:41.236Z | 2026-10-26T19:34:36.562Z |
| cve-2026-116467 | ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp … |
ggml-org |
llama.cpp |
2026-10-26T18:15:14.725Z | 2026-10-26T19:34:25.208Z | |
| cve-2014-125135 | OctoPrint Flask Secret Key hard-coded key |
n/a |
OctoPrint |
2026-10-26T19:00:19.803Z | 2026-10-26T19:34:15.433Z | |
| cve-2026-110110 | 5.3 (v4.0) 4.3 (v3.1) | JetLinks Community through 2.10.0 Missing Authorizatio… |
jetlinks |
JetLinks Community |
2026-10-13T16:53:11.419Z | 2026-10-26T19:34:05.592Z |
| cve-2026-110117 | 7.1 (v4.0) 6.5 (v3.1) | SmartAdmin through 3.30.0 Missing Authorization via Ad… |
1024-lab |
SmartAdmin |
2026-10-13T16:53:14.709Z | 2026-10-26T19:32:05.571Z |
| cve-2026-110122 | 5.3 (v4.0) 4.3 (v3.1) | PickMall lilishop through 4.4 IDOR via Goods Freight E… |
PickMall |
lilishop |
2026-10-13T16:53:17.861Z | 2026-10-26T19:29:42.529Z |
| cve-2026-110127 | 5.3 (v4.0) 4.3 (v3.1) | waynboot-mall through 2.0.0 IDOR via Mobile Cart Endpoints |
wayn111 |
waynboot-mall |
2026-10-13T16:53:21.047Z | 2026-10-26T19:27:01.469Z |
| cve-2026-109428 | 8.7 (v4.0) 8.8 (v3.1) | Mistral Vibe < 2.25.5 Permission Bypass via Bash Line … |
mistralai |
mistral-vibe |
2026-10-13T18:17:05.062Z | 2026-10-26T19:25:04.692Z |
| cve-2026-110205 | 7.7 (v4.0) 8.8 (v3.1) | Roo-Code through 3.54.0 Auto-Approve Bypass via Glob T… |
RooCodeInc |
Roo-Code |
2026-10-13T18:49:57.504Z | 2026-10-26T19:00:11.643Z |
| cve-2026-116631 | N/A | External protocol handler (tel:) address bar spoof |
Mozilla |
Firefox for iOS |
2026-10-26T18:32:36.715Z | 2026-10-26T18:57:54.011Z |
| cve-2026-110210 | 6 (v4.0) 5.3 (v3.1) | Phase Console through 2.77.3 Missing Authorization via… |
Phase |
Phase Console |
2026-10-13T18:50:00.625Z | 2026-10-26T18:57:23.422Z |
| cve-2026-116632 | N/A | Facetime protocol handler enabled spoofing |
Mozilla |
Firefox for iOS |
2026-10-26T18:32:35.728Z | 2026-10-26T18:56:21.288Z |
| cve-2026-110215 | 8.7 (v4.0) 8.8 (v3.1) | youlai-boot through 2.21.1 Missing Authorization in Ro… |
youlaitech |
youlai-boot |
2026-10-13T18:50:03.848Z | 2026-10-26T18:36:49.707Z |
| cve-2026-110220 | 7.1 (v4.0) 7.1 (v3.1) | Kubeflow Model Registry through 0.3.17 SSRF via Infere… |
Kubeflow |
Model Registry |
2026-10-13T18:50:07.237Z | 2026-10-26T18:31:35.835Z |
| cve-2026-110225 | 5.1 (v4.0) 2.7 (v3.1) | Shaarli through 0.16.9 SSRF via Thumbnail Retrieval up… |
shaarli |
Shaarli |
2026-10-13T18:50:10.481Z | 2026-10-26T18:27:10.583Z |
| cve-2026-110231 | 5.6 (v4.0) 4.7 (v3.1) | muCommander through 1.6.2 Path Traversal via Archive E… |
muCommander |
muCommander |
2026-10-13T18:50:14.112Z | 2026-10-26T18:17:32.363Z |
| cve-2026-110236 | 7.1 (v4.0) 7 (v3.1) | KDE Dolphin 24.08.0 through 26.08.2 OS Command Injecti… |
KDE |
Dolphin |
2026-10-13T18:50:17.460Z | 2026-10-26T18:16:16.535Z |
| cve-2026-110111 | 7.7 (v4.0) 7.5 (v3.1) | Xen Orchestra before 6.9.0 Privilege Escalation via Pr… |
vatesfr |
xen-orchestra |
2026-10-13T19:05:26.615Z | 2026-10-26T18:13:58.740Z |
| cve-2026-10759 | 5.5 (v3.1) | BUG-000171040 Portal for ArcGIS has a security vulnerability |
Esri |
Portal for ArcGIS |
2026-10-13T16:04:54.961Z | 2026-10-26T18:10:50.581Z |
| cve-2026-110256 | 6.3 (v4.0) 3.7 (v3.1) | Dockhand before 1.0.19 Username Enumeration via LDAP I… |
Finsys |
dockhand |
2026-10-13T19:05:29.809Z | 2026-10-26T18:10:38.724Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2005-avi-263 | Vulnérabilité dans Cisco Security Agent (CSA) | 2005-07-15T00:00:00.000000 | 2005-07-15T00:00:00.000000 |
| certa-2005-avi-261 | Multiples vulnérabilités dans Bugzilla | 2005-07-15T00:00:00.000000 | 2005-07-15T00:00:00.000000 |
| certa-2005-avi-247 | Vulnérabilités dans Adobe Reader | 2005-07-06T00:00:00.000000 | 2005-07-15T00:00:00.000000 |
| certa-2005-avi-260 | Vulnérabilités dans IBM AIX ftpd | 2005-07-13T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-259 | Vulnérabilités dans CISCO Call Manager | 2005-07-13T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-258 | Multiples vulnérabilités dans Mac OS X | 2005-07-13T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-254 | Vulnérabilité dans le module de gestion des couleurs de Microsoft | 2005-07-13T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-253 | Vulnérabilité dans Microsoft Word | 2005-07-13T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-249 | Vulnérabilité de Ruby | 2005-07-12T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-202 | Multiples vulnérabilités de Gaim | 2005-06-13T00:00:00.000000 | 2005-07-13T00:00:00.000000 |
| certa-2005-avi-252 | Vulnérabilité de IBM Tivoli | 2005-07-12T00:00:00.000000 | 2005-07-12T00:00:00.000000 |
| certa-2005-avi-234 | Vulnérabilité de ClamAV | 2005-06-28T00:00:00.000000 | 2005-07-12T00:00:00.000000 |
| certa-2005-avi-153 | Multiples vulnérabilités de MPlayer | 2005-04-21T00:00:00.000000 | 2005-07-12T00:00:00.000000 |
| certa-2005-avi-225 | Vulnérabilité dans SpamAssassin | 2005-06-17T00:00:00.000000 | 2005-07-11T00:00:00.000000 |
| certa-2005-avi-167 | Multiples vulnérabilités dans CVS | 2005-05-17T00:00:00.000000 | 2005-07-11T00:00:00.000000 |
| certa-2005-avi-165 | Vulnérabilité dans Squid | 2005-05-17T00:00:00.000000 | 2005-07-11T00:00:00.000000 |
| certa-2005-avi-096 | Vulnérabilités dans phpBB | 2005-03-02T00:00:00.000000 | 2005-07-11T00:00:00.000000 |
| certa-2005-avi-248 | Vulnérabilité d'Internet Explorer | 2005-07-07T00:00:00.000000 | 2005-07-07T00:00:00.000000 |
| certa-2005-avi-244 | Vulnérabilité dans les produits Nortel | 2005-07-06T00:00:00.000000 | 2005-07-06T00:00:00.000000 |
| certa-2005-avi-230 | Multiples vulnérabilités des lecteurs RealPlayer | 2005-06-24T00:00:00.000000 | 2005-07-06T00:00:00.000000 |
| certa-2005-avi-237 | Vulnérabilité dans phpBB | 2005-06-29T00:00:00.000000 | 2005-07-05T00:00:00.000000 |
| certa-2005-avi-241 | Vulnérabilités dans la pile <TT>TCP</TT> de FreeBSD | 2005-07-01T00:00:00.000000 | 2005-07-01T00:00:00.000000 |
| certa-2005-avi-240 | Vulnérabilités FreeBSD (ipfw) | 2005-07-01T00:00:00.000000 | 2005-07-01T00:00:00.000000 |
| certa-2005-avi-226 | Vulnérabilité dans l'utilitaire sudo | 2005-06-21T00:00:00.000000 | 2005-07-01T00:00:00.000000 |
| certa-2005-avi-238 | Vulnérabilité de RADIUS Authentication sous CISCO IOS | 2005-06-30T00:00:00.000000 | 2005-06-30T00:00:00.000000 |
| certa-2005-avi-236 | Vulnérabilité du chargeur ld.so sous Solaris | 2005-06-29T00:00:00.000000 | 2005-06-29T00:00:00.000000 |
| certa-2005-avi-203 | Vulnérabilité d'ImageMagick et GraphicsMagick | 2005-06-13T00:00:00.000000 | 2005-06-29T00:00:00.000000 |
| certa-2005-avi-235 | Multiples vulnérabilités des produits Adobe pour Mac OS X | 2005-06-28T00:00:00.000000 | 2005-06-28T00:00:00.000000 |
| certa-2005-avi-233 | Vulnérabilité dans la base de données DB2 | 2005-06-28T00:00:00.000000 | 2005-06-28T00:00:00.000000 |
| certa-2005-avi-178 | Multiples vulnérabilités d'Ethereal | 2005-05-27T00:00:00.000000 | 2005-06-28T00:00:00.000000 |